Security Incidents: Re: New variant against phpBB2?

[Andrew <imran.nappa () gmail com>]

In-Reply-To: <426D5035.5020303 () stormcenter net>

I noticed this on one of my servers as well. I've determined a few of the possible PHPBB installs on the server. I'm 
however trying to narrow it down. My one was Variant #2. I did remove them, but I'm trying to trace how they got in 
there. I've looked in the logs for the word boink, but nothing is there. so I would appreciate some help. Thanks.

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------